gravwell / kits

A collection of open source Gravwell kits
BSD 2-Clause "Simplified" License
3 stars 15 forks source link

syslog kit: hostname and appname regex is too strict #170

Closed kris-watts-gravwell closed 4 months ago

kris-watts-gravwell commented 5 months ago

What are the steps to reproduce this issue?

  1. Load up syslog data where hostname or appname have dashes in them
  2. select a hostname

What happens?

It breaks down the hostname into dashes which means you can't use the hostname

What were you expecting to happen?

Not break on dashes

Any other comments?

current regex is \w+ but it should be ^(([a-zA-Z0-9]|[a-zA-Z0-9][a-zA-Z0-9\-]*[a-zA-Z0-9])\.)*([A-Za-z0-9]|[A-Za-z0-9][A-Za-z0-9\-]*[A-Za-z0-9])$

This should be changed on both syslog and linux syslog kits